Abstract
This paper discusses potential complications for Forensic Investigations due to the spread of Solid State Disc (SSD) technologies and influence of socio-technical factors. The discussion is drawing upon a study based on interviews with an experienced Forensic Investigator from Hampshire Constabularies Hi-Tech Crime Unit (HTCU), located in the United Kingdom. The goal of this study was to identify examples of what experienced forensic investigators believe the biggest drawbacks with examining SSDs are. Background case studies have been made in assistance to identify specific characteristics and features that may impact forensic investigations. Key characteristics include that SSD features may pose a threat as potential evidence can be rendered inaccessible; possibly impacting the case or project negatively. The main themes discussed in this paper are related to: Hardware-based encryption, Garbage Collection (GC), the TRIM command, Controller technology, SSD Interfaces, and SSD User needs. Socio-technical influences were acknowledged during the interviews with the Investigator, showing uncertainty to alternative Forensic methods. These themes have been scrutinized to identify how they impact and limit investigations.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
Bamburic, M.: Modern SSDs can last a lifetime. https://betanews.com/2014/12/05/modern-ssds-can-last-a-lifetime/
Bednar, P., Katos, V.: SSD: New challenges for digital forensics. In: ItAIS, pp. 4–5. Research Gate, Rome (2011)
Belkasoft: Recovering evidence from SSD drives in 2014: Understanding TRIM, Garbage Collection and Exclusions. https://articles.forensicfocus.com/2014/09/23/recovering-evidence-from-ssd-drives-in-2014-understanding-trim-garbage-collection-and-exclusions/
Ben, M., O.: With An OWC SSD, There’s No Need For TRIM. https://blog.macsales.com/21641-with-an-owc-ssd-theres-no-need-for-trim
Bonheur, K.: SSD: advantages and disadvantages of solid-state drive | Version Daily. http://www.versiondaily.com/ssd-advantages-disadvantages-solid-state-drive/
Dutelle, A.: Introduction to Crime Scene Investigation. Jones & Bartlett Learning (2016)
Gubanov, Y., Afonin, O.: Why SSD Drives Destroy Court Evidence, and What Can Be Done About It. Belkasoft Ltd. (2012)
Hruska, J.: How Do SSDs Work?—ExtremeTech. https://www.extremetech.com/extreme/210492-extremetech-explains-how-do-ssds-work
Hutchinson, L.: Ask Ars: “My SSD does garbage collection, so I don’t need TRIM right?”. https://arstechnica.co.uk/gadgets/2015/04/ask-ars-my-ssd-does-garbage-collection-so-i-dont-need-trim-right/
Hyde, S.: TLC vs MLC vs SLC, performance, benchmarks and reliability. http://shawnhyde.com/post/2013/09/11/TLC-vs-MLC-vs-SLC-Performance-benchmarks-and-reliability
Investigatory Powers Act 2016. TSO (The Stationery Office) (2016)
Kaese, R.: StorageNewsletter 2016 trends and driving forces in HDD and SSD. https://www.storagenewsletter.com/2015/12/24/2016-trends-and-driving-forces-in-hdd-and-ssd/
Kaplan, B.: RAM is Key. Carnegie Mellon University (2007)
Kumar, V.: Pros and Cons of Cassette Player. http://www.sooperarticles.com/shopping-articles/appliances-articles/pros-cons-cassette-player-1200547.html
Landsman, D.: AHCI and NVMe as Interfaces for SATA Express™ Devices—Overview (2017)
M.2 FAQ|Kingston. https://www.kingston.com/en/ssd/system-builder/m2_faq
Micheloni, R., Marelli, A., Eshghi, K.: Inside Solid State Drives (SSDs). Springer, Dordrecht (2012)
Ngo, D.: Want your SSD to last a long time? Then do this. https://www.cnet.com/uk/how-to/how-ssds-solid-state-drives-work-increase-lifespan/
Regulation of Investigatory Powers Act 2000. The Stationery Office Limited (2000)
Regulation of Investigatory Powers Act 2000/Part III—ORG Wiki, https://wiki.openrightsgroup.org/wiki/Regulation_of_Investigatory_Powers_Act_2000/Part_III
Rouse, M.: What is overprovisioning (SSD overprovisioning)?—Definition from WhatIs.com. http://searchsolidstatestorage.techtarget.com/definition/over-provisioning-SSD-overprovisioning
Rouse, M.: What is RAID (redundant array of independent disks)?—Definition from WhatIs.com. http://searchstorage.techtarget.com/definition/RAID
Section six: Indecent images of children
Sieber, T.: Why It Is Impossible To Recover Data From An Overwritten Hard Drive [Technology Explained]. http://www.makeuseof.com/tag/impossible-recover-data-overwritten-hard-drive-technology-explained/
Solid State Drives for Business | Samsung Business-Copy, http://www.samsung.com/us/business/products/computing/solid-state-drives/
Solnfected: M.2 SSD not showing up in BIOS—[Solved]—Motherboards. http://www.tomshardware.co.uk/answers/id-2950809/ssd-showing-bios.html
Stanek, W.: Windows Server 2016: Installing & Configuring. Stanek & Associates (2016)
The Importance of SSD Controller Technology to the Defense and Avionics Industries. http://www.telecomsys.com/Libraries/Collateral_Documents/SSD_Controller_Whitepaper.sflb.ashx
Tian, J., Jing, J., Srivatsa, M.: International Conference on Security and Privacy in Communication Networks. Springer International Publishing (2015)
Torres, G.: Everything You Need to Know About Chipsets—Hardware Secrets. http://www.hardwaresecrets.com/everything-you-need-to-know-about-chipsets/
Travis, A.: Simple numbers tell story of police cuts under Theresa May | Alan Travis. https://www.theguardian.com/uk-news/2017/jun/05/theresa-may-police-cuts-margaret-thatcher-budgets
Trim Enabler 4: Enable Trim And Maximize Your Mac SSD Performance. https://cindori.org/trimenabler/
Wang, G., Zomaya, A., Martinez Perez, G., Li, K.: Algorithms and Architectures for Parallel Processing. Springer International Publishing, Cham (2015)
Whitworth, B.: A Brief Introduction to Sociotechnical Systems. IGI Global, Auckland (2008)
Wiebe, J.: Forensic Insight into Solid State Drives. http://www.forensicmag.com/article/2013/05/forensic-insight-solid-state-drives
Wu, C.: Securing SSDs with AES Disk Encryption. http://electronicdesign.com/memory/securing-ssds-aes-disk-encryption
Author information
Authors and Affiliations
Corresponding authors
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2019 Springer International Publishing AG, part of Springer Nature
About this paper
Cite this paper
Cox, J., Bednar, P. (2019). Potential Difficulties During Investigations Due to Solid State Drive (SSD) Technology. In: Cabitza, F., Batini, C., Magni, M. (eds) Organizing for the Digital World. Lecture Notes in Information Systems and Organisation, vol 28. Springer, Cham. https://doi.org/10.1007/978-3-319-90503-7_7
Download citation
DOI: https://doi.org/10.1007/978-3-319-90503-7_7
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-319-90502-0
Online ISBN: 978-3-319-90503-7
eBook Packages: Business and ManagementBusiness and Management (R0)